t-mobile[.]miqe[.]cc

This report details the malicious domain t-mobile.miqe.cc, which was observed impersonating the brand x.com. The site displayed a page title of "Welcome to nginx!" and was categorized as an impersonation scam. The primary threat posed by this domain is brand impersonation, potentially used to deceive users into believing they are interacting with a legitimate service associated with x.com, thereby facilitating credential theft or other fraudulent activities.

Technical analysis reveals that the domain was flagged by 12 out of 95 VirusTotal vendors, indicating a high confidence of malicious activity. It was specifically flagged by threat intelligence sources including Criminal IP, Chong Lua Dao, Cluster25, CRDF, and ESET, and appeared on 1 blocklist. The domain was registered with Gname.com Pte. Ltd. and created on 2026-02-21. It resolved to IP address 172.67.142.248, located in the United States and hosted by AS13335 Cloudflare, Inc. The domain used nameservers gordon.ns.cloudflare.com and linda.ns.cloudflare.com. No SSL certificate was detected.

As of the time of analysis, the domain was offline and inaccessible. The GridinSoft trust rating is 0 out of 100, and the DOM risk score is 10, indicating a severe and immediate threat. The risk level is considered critical due to the combination of high detection rates, brand impersonation, and lack of security measures.